UN
Product
Unzip
16
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 5Low 2
Watch
Add Unzip to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-8141 | 7.8 | Jan 31 | Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t… Affected: through 6.0 |
| CVE-2014-8140 | 7.8 | Jan 31 | Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t… Affected: through 6.0 |
| CVE-2014-8139 | 7.8 | Jan 31 | Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command… Affected: through 6.0 |
| CVE-2018-1000035 | 7.8 | Feb 9 | A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to… Affected: through 6.00 |
Showing 4